Heads up to everyone using SonicWall firewalls: update your devices now

So, if you’ve got a mining farm or anything else that’s behind a SonicWall, there’s a big vulnerability that just came to light. You really need to update your unit ASAP. They’ve got the firmware for most devices available for free, even if your model is no longer supported, unless it’s like super old. - Dave

I corrected the spelling of the word update in the title. I Should have noticed it sooner.

Heh, but we both missed I also munged the word firewall. I was too cheap to buy that last vowel. Spent most of the week doing updates what a pain. Makes you really wonder how many vulnerable units are out there. -Dave

23-Jan-2021 Update, if you are using a VPN to connect to a few SonicWall products they have found another vulnerability. https://www.sonicwall.com/support/product-notification/urgent-security-notice-netextender-vpn-client-10-x-sma-100-series-vulnerability/210122173415410/ Not sure how many people are actually using them in the home / private / mining environment but some people might. If you have your stuff hosted somewhere and you need a VPN to connect you should find out what equipment they are using. -Dave

Necro Bump on 15-June-2021 BUT there is another vulnerability: https://www.sonicwall.com/support/product-notification/security-advisory-sonicos-vulnerability-in-firewall-web-management-interface/210609115514740/ If there are this many issues with a 'real' product like a SonicWall, think about how many cheap home & SOHO firewall / routers there are out there with vulnerable firmware that people are just running. How many are out there from manufacturers that don't even exist anymore so your only option would be to buy a new one. -Dave